Overview:
To lead application security across a portfolio of on-premises software and applications. This role provides expert guidance, drives secure development practices, and leads key security activities such as threat modelling and backlog management. The Principal Applications Security Engineer works independently and collaborates with engineering teams and product stakeholders to continually strengthen the portfolio’s security posture.
Responsibilities:
Role Specific
-
Provide subject‑matter expertise in identifying, assessing, and resolving application security issues across the product portfolio.
- Lead threat modelling activities for new features and architectural changes, ensuring risks are well understood and addressed.
- Guide development teams in adopting secure coding practices for .NET/C# and Angular applications.
- Manage and prioritise the application security backlog, working independently to drive risk-based remediation with product teams.
- Support and mature Security Champions, providing coaching, guidance, and security best practices.
- Operate and improve existing application security tooling within CI/CD pipelines and influence future enhancements where appropriate.
- Develop security guidance and automation that help shift security earlier in the development lifecycle.
- Participate in architecture and security reviews, providing constructive and actionable feedback on designs.
- Contribute to the ongoing adoption of NIST SSDF-aligned practices across the development lifecycle.
Individual
-
Maintain the effectiveness of the Quality and Health, Safety and Environmental (HSE) system at the sites via adherence to applicable policies and procedures
-
Complete Quality and Health, Safety and Environmental (HSE) System related actions in a timely manner according to procedures e.g. CAPA, NCR
Adhere to Health, Safety and Environmental (HSE) policies and procedures.
Qualifications:
Qualifications / Education required:
1. Degree (or equivalent) in a Computer Science or Software Engineering discipline
1. Solid experience in an Application Security or DevSecOps role.
2. Strong software engineering background, ideally including .NET and C#.
3. Experience securing applications built with .NET/C# and modern front-end frameworks such as Angular.
4. Strong understanding of secure software development lifecycle principles and major security frameworks (e.g., NIST, OWASP).
5. Ability to identify and remediate application security vulnerabilities beyond common patterns such as the OWASP Top 10.
6. Hands-on experience using common application security tooling (e.g., SAST, DAST, SCA).
Aptitude/skills required:
-
Good written and oral communication skills are required, for example, to ensure succinct report generation, effective communication with staff, peer groups, etc., across the organisation.
-
Ability to work autonomously, manage personal workload effectively, and make thoughtful recommendations with limited guidance.
-
Ability to influence and collaborate with cross-functional teams at all levels of the organisation.
Company Description:
Waters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance. Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide.
Diversity and inclusion are fundamental to our core values at Waters Corporation. It benefits our employees, our products, our customers and our community. Waters complies with all applicable federal, state, and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status, or any other characteristic protected by law. Waters is proud to be an equal opportunity workplace and is an affirmative action employer. All hiring decisions are based solely on qualifications, merit, and business needs at the time.
